Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: 1feFCKFxufHOnqQbdgnpyLmxKV5wUV5lfFYWzoZAuG4=
Subject key identifier: 98:C3:72:A5:2E:58:BF:2C:E6:1D:20:47:B3:BF:4F:E8:05:46:DB:51
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 019749681C4DCA08A212C2111D3CF3AC27B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 01D6
Signing time: Sat 07 Jun 2025 08:00:49 +0000
Manifest this update: Sat 07 Jun 2025 08:00:49 +0000
Manifest next update: Sun 08 Jun 2025 08:00:49 +0000
Files and hashes: 1: 4TNcEamcxMBJdxuRNcPnkIPobhU.roa (hash: m5tTan6cU+uoGi79hby9WpCdyKNlJQA9BZkDNvmdK4g=)
2: Tzl5NFiih_Oo3si8dnUw8wkuo2I.roa (hash: 6Qg5GxXMwFQB8Qi2Ip90XrbOE+HYQ3G3PbvVVea81ok=)
3: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: xB6smxwXr+j5G2tZ9/+CNP7O1RmBrugS2cSRt/0LoVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:1c:4d:ca:08:a2:12:c2:11:1d:3c:f3:ac:27:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Jun 7 08:00:49 2025 GMT
Not After : Jun 8 08:00:49 2025 GMT
Subject: CN=98c372a52e58bf2ce61d2047b3bf4fe80546db51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:17:ef:9d:23:6a:09:43:20:58:8a:98:f2:
78:27:40:4e:d7:80:ba:2a:59:aa:6c:51:d7:35:37:
49:57:29:96:0f:9e:7d:5c:97:c2:a4:7d:3d:8a:cd:
c4:ec:e5:b0:0d:d5:ac:fb:57:39:c8:dc:aa:92:2b:
2a:87:2f:07:7b:f5:64:ff:1a:5f:2e:17:35:76:9c:
d0:62:1a:dd:40:3c:42:67:3b:a2:82:55:00:70:b8:
5e:04:c4:25:7f:3e:31:a5:a8:17:e1:76:54:58:28:
4a:5c:10:52:db:c3:d5:fa:10:9e:d7:11:a8:fd:da:
75:7f:ca:55:28:de:5d:43:d5:33:66:11:bb:96:cb:
7d:e6:90:3f:a0:e7:1c:d8:06:79:ab:20:44:25:6e:
26:ce:ad:11:42:5d:34:46:c6:a1:9d:8f:b8:92:a3:
ec:bb:b4:2f:17:60:d0:33:58:bd:fa:f2:0c:6f:6d:
9e:fa:33:bf:83:bb:52:e8:af:e1:c1:1d:ec:5f:88:
03:c2:c6:fe:85:09:d0:65:6f:af:b2:0f:0c:70:dd:
86:4b:f3:23:d8:2b:79:65:e7:28:0f:2d:d5:ea:c7:
00:f5:e0:30:ed:13:bf:b4:ba:39:0e:30:b2:c5:2c:
ae:c1:72:b5:9c:ad:8e:b8:21:ad:eb:6e:ca:9d:19:
2e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C3:72:A5:2E:58:BF:2C:E6:1D:20:47:B3:BF:4F:E8:05:46:DB:51
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:79:81:57:1f:4a:b9:44:1b:54:59:49:1a:1e:a2:8f:04:39:
1a:c6:6d:78:ab:af:e5:65:17:40:03:23:f8:a0:89:14:7a:14:
bc:b9:79:25:b3:01:5c:13:d0:ff:75:ca:fe:7e:8e:db:aa:5c:
64:fe:41:87:22:91:13:bc:26:a3:7e:e0:b1:6e:41:6e:3d:f4:
9e:be:04:41:14:cf:8a:66:5e:72:e3:ad:4a:1c:a2:00:6c:21:
42:0e:ee:e1:04:f8:e3:e9:e8:9b:d5:e4:4f:55:9a:2f:68:a5:
77:85:e0:c3:5e:82:12:6d:42:40:9b:e1:17:c4:2b:72:67:c9:
23:6c:c0:4d:00:01:a8:31:76:17:9d:a7:ea:40:7e:3a:c7:99:
4a:de:27:ed:dd:c5:68:bf:17:30:a9:dd:3e:7e:45:9f:8d:a1:
8b:da:92:b8:bc:66:ff:51:d5:5e:5a:ff:01:ce:66:aa:e6:84:
f1:18:fe:a7:54:1d:92:10:6d:e8:c2:8a:38:3a:b0:53:77:02:
06:08:34:3c:46:21:eb:fc:84:01:11:78:f4:03:9b:a1:0d:60:
36:5c:8f:f2:c4:ba:3f:d5:ed:d0:24:b6:e7:c1:fb:33:bd:16:
dd:1b:7b:d8:50:0b:41:b7:34:1b:ec:8c:ee:8e:12:c5:e7:c0:
a5:a9:a0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:24 2025 by rpki-client